Static task
static1
Behavioral task
behavioral1
Sample
358841bb2822edc12878ded654bec7a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
358841bb2822edc12878ded654bec7a9.exe
Resource
win10v2004-20231222-en
General
-
Target
358841bb2822edc12878ded654bec7a9
-
Size
2.7MB
-
MD5
358841bb2822edc12878ded654bec7a9
-
SHA1
07ca20f3c0aa78670cc3cd2f046c004b7b4eb94b
-
SHA256
e93811e74ec8b04fc573c1ddda16922108f828231a1cef03dfbe11f71f8e5993
-
SHA512
688579c04ecdd36c3d7b82ee6ee2b246a7f23e16da13496036ccf8222d0c7bb99cf004afdbcd89b9e4070848344139d5048de52cfcc952bb30558d7992a969e8
-
SSDEEP
49152:bLECog3kTtrdGtpSLBOL/5PN32Cdb2Y2P7haVnnSAWYL5PxyxoPfb+HddYORaO3:3bH3ktdv25PN3JUtFaVnnSAW45Y2PyH9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 358841bb2822edc12878ded654bec7a9
Files
-
358841bb2822edc12878ded654bec7a9.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 220KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE